
In the Claims : 

Please amend claims 1, 3, 7, 9, 11, 13, 14, 17, 19, 23, 25, 27, 29, 30, 34, 36, 37, 
39 and 41, as indicated below. 

1. (Currently Amended) A method for communicating in a distributed computing 
environment, comprising: 

receiving a message in a data representation language from a source to be sent to 
a destinatio n, wherein said source is a client in the distributed computing 
environment and said destination is a service in the distributed computing 
environment ; 



receiving a data representation language schema, wherein said data representation 
language schema defines a message interface for accessing the service; 

generating a message endpoint for the client according to said data representation 
language schema, wherein said message endpoint performs: 

verifying type correctness of said message according to a said data 
representation language schema; and 

attaching an authentication credential to said message, wherein said 
authentication credential identifies said sourc e client ; and 

sending said message to said d e stination service . 



2. (Canceled). 
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^'(Currently Amended) The method as recited in claim 2 J_, wherein said data 
representation language schema defines a set of messages in the data representation 
language that said client may send to said service to access said service. 

y T 

j(. (Original) The method as recited in claim further comprising said message 
endpoint for the client verifying that said message to be sent to said service complies with 
a data representation language message definition from said data representation language 
schema. 

5c (Original) The method as recited in claim ^ further comprising said client 
obtaining from said message endpoint the set of data representation language messages 
that said client may send to said service. 

^ r 

^ (Original) The method as recited in claim jf> wherein said set of messages in 
the data representation language that said client may send to said service is a subset of all 
messages that can be handled by said service so that said client's access to said service is 
restricted. 

^. (Currently Amended) The method as recited in claim 2 I, further comprising: 

said message endpoint for the client receiving a data representation language 
message from said service, wherein said data representation language message from said 
service includes an authentication credential for said service; 

said message endpoint for the client using said authentication credential for said 
service to authenticate said data representation language message from 
said service as being from said service; and 

said client obtaining, from said message endpoint for said client, the authenticated 
message from said service. 
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i<t Original) The method as recited in clainv^f wherein said data representation 
language schema defines a set of messages that said service may send to said client, the 
method further comprising said message endpoint for the client verifying the correctness 
of said data representation language message from said service according to said data 
representation language schema. 

jf. (Currently Amended) The method as recited in claim 2 I, further comprising 
binding said message endpoint for the client to a single destination address so that said 
message endpoint only sends messages to said destination address. 

y (Original) The method as recited in claim^sC wherein said destination address 
is a Uniform Resource Identifier (URI) for said service, wherein said sending said 
message to a destination comprises sending said message to an address specified by said 
URI using a protocol specified by said URI. 

)n. (Currently Amended) The method as recited in claim 3 1, wherein said 
message endpoint for the client is a single atomic unit of program code that provides an 
abstraction for said service to said client. 

ft. (Original) The method as recited in claini^l , wherein said single atomic unit 
of program code is generated under control of said client's execution environment. 

L3. (Currently Amended) The method as recited in claim 2 I, wherein once 
generated said message endpoint for the client cannot be altered as to said verifying type 
correctness and said attaching an authentication credential. 

m. (Currently Amended) The method as recited in claim 2 1, wherein said client 
comprises a client process and wherein said service comprises a service process, and 
wherein said client process is executable under a different type of execution environment 
than said service process. 
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V . 

(Original) The method as recited in claim 1, wherein said data representation 
language is extensible Markup Language (XML). 

y6. (Original) The method as recited in claim 1, wherein said source is a service 
in the distributed computing environment and said destination is a client in the distributed 
computing environment, the method further comprising generating a message endpoint 
for the service according to a data representation language schema, wherein said 
verifying type correctness and said attaching an authentication credential are performed 
by said message endpoint for the service, and wherein said data representation language 
schema defines a message interface between said service and said client. 

V 

(Currently Amended) A device, comprising: 
a processor; 

a memory coupled to said processor comprising program instructions, wherein the 
program instructions are configured to implement : 

a message gate unit configured to: 

receive a message in a data representation language from a source to be 
sent to a destination, wherein said source is a process executed by 
said processor from said memor y, wherein said source is a client 
process in a distributed computing environment and said 
destination is a service in the distributed computing environment ; 

receive a data representation language schema, wherein said data 
representation language schema defines a message interface for 
accessing the service; 
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generate said message gate unit according to said data representation 
language schema, wherein said message gate unit is configured to: 

verify type correctness of said message according to a said data 
representation language schema; and 

attach an authentication credential to said message, wherein said 
authentication credential identifies said source; and 

send said message to said destination. 



18. (Canceled). 

\ .^(Currently Amended) The device as recited in claim 4$ j^wherein said data 
representation language schema defines a set of messages in the data representation 
language that said client process may send to said service to access said service. 

(Original) The device as recited in claim l^f wherein said message gate unit 
is further configured to verify that said message to be sent to said service complies with a 
data representation language message definition from said data representation language 
schema. ^ 

. (Original) The device as recited in claim Ji9 9 wherein said client process is 
configured to obtain from said message gate unit the set of data representation language 
messages that said client process may send to said service. 

(Original) The device as recited in claim wherein said set of messages in 
the data representation language that said client process may send to said service is a 
subset of all messages that can be handled by said service so that said client process's 
access to said service is restricted. 
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0 (Currently Amended) The device as recited in claim ±% wherein said 
message gate unit for the client is further configured to: 



receive a data representation language message from said service, wherein said 
data representation language message from said service includes an 
authentication credential for said service; 

use said authentication credential for said service to authenticate said data 
representation language message from said service as being from said 
service; and 

wherein said client process is configured to obtain, from said message gate unit 
for said client, the authenticated message from said service. 

2fif. (Original) The device as recited in claim^f wherein said data representation 
language schema defines a set of messages that said service may send to said client 
process, wherein said message gate unit for the client is further configured to verify the 
correctness of said data representation language message from said service according to 
said data representation language schema. 

(Currently Amended) The device as recited in claim +8^7, wherein said 
message gate unit for the client process is bound to a single destination address so that 
said message gate unit only sends messages to said destination address. 

u 20. (Original) The device as recited in claim ^6, wherein said destination address 
is a Uniform Resource Identifier (URI) for said service, wherein said message gate unit is 
further configured to send said message to an address specified by said URI using a 
protocol specified by said URI. 
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°1J/ (Currently Amended) The device as recited in claim \% \J£ wherein said 
message gate unit for the client is a single atomic unit of program code executed by said 
processor that provides an abstraction for said service to said client process. 

2jg. (Original) The device as recited in claim 27, wherein said device is 
configured so that said single atomic unit of program code is generated under control of 
device ' s execution environment. 

lie 



2 1 ) 



(Currently Amended) The device as recited in claim ±S Y^, wherein said 
message endpoint for the client is configured so that once generated said message 
endpoint for the client cannot be altered as to verifying type correctness and attaching the 
authentication credential. 

(Currently Amended) The device as recited in claim i% ^7, wherein said 
client process is executable under a different type of execution environment than a 
service process for said service. 

f) If 

34 . (Original) The device as recited in claim Yl, wherein said data representation 
language is extensible Markup Language (XML). 

(Original) The device as recited in claim IT', wherein said source is a service 
process in a distributed computing environment and said destination is a client in the 
distributed computing environment, the device further configured to generate said 
message gate unit for the service according to a data representation language schema, and 
wherein said data representation language schema defines a message interface between 
said service and said client. 

3Y. (Original) The device as recited in claim yl, wherein said device is a 
computer system, mobile telephone, or personal digital assistant. 
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~^3^T (Currently Amended) A carrier medium comprising program instructions, 
wherein the program instructions are computer-executable to implement: 

receiving a message in a data representation language from a source to be sent to 
a destination , wherein said source is a client in a distributed computing 
environment and said destination is a service in the distributed computing 
environment ; 

receiving a data representation language schema, wherein said data representation 
language schema defines a message interface for accessing the service; 

generating a message endpoint for the client according to said data representation 
language schema, wherein said message endpoint performs: 

verifying type correctness of said message according to a said data 
representation language schema; 

attaching an authentication credential to said message, wherein said 
authentication credential identifies said source; and 

sending said message to said destination. 



said data representation language schema defines a set of messages in the data 
representation language that said client may send to said service to access said service, 
and wherein the program instructions are further computer-executable to implement: 




35. (Canceled). 

(Currently Amended) 





The carrier medium as recited in claim 35 ^ wherein 
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said message endpoint for the client verifying that said message to be sent to said 
service complies with a data representation language message definition 
from said data representation language schema. 

^Currently Amended) The carrier medium as recited in claim wherein 
the program instructions are further computer-executable to implement: 

said message endpoint for the client receiving a data representation language 
message from said service, wherein said data representation language 
message from said service includes an authentication credential for said 
service; 

said message endpoint for the client using said authentication credential for said 
service to authenticate said data representation language message from 
said service as being from said service; and 



said client obtaining, from said message endpoint for said client, the authenticated 
message from said service. \ 

f v 

(Original) The carrier medium as recited in claim )4, wherein said data 
representation language schema defines a set of messages that said service may send to 
said client, and wherein the program instructions are further computer-executable to 
implement: 

said message endpoint for the client verifying the correctness of said data 
representation language message from said service according to said data 
representation language schema. 

^4. (Currently Amended) The carrier medium as recited in claim 55 ^ wherein 
the program instructions are further computer-executable to implement: 
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binding said message endpoint for the client a single destination address so that 
said message endpoint only sends messages to said destination address. 

^0 (Original) The carrier medium as recited in claim wherein said destination 
address is a Uniform Resource Identifier (URI) for said service, and wherein, in said 
sending said message to a destination, the program instructions are further computer- 
executable to implement: 

sending said message to an address specified by said URI using a protocol 
specified by said URI. 

yi. (Currently Amended) The carrier medium as recited in claim 35^4, wherein 
said message endpoint for the client is a single atomic unit of program code that provides 
an abstraction for said service to said client. 

(Original) The carrier medium as recited in claim y(, wherein said data 
representation language is extensible Markup Language (XML). 

(Original) The carrier medium as recited in claim ^4, wherein said source is a 
service in the distributed computing environment and said destination is a client in the 
distributed computing environment, and wherein the program instructions are further 
computer-executable to implement: 

generating a message endpoint for the service according to a data representation 
language schema, wherein said verifying type correctness and said 
attaching an authentication credential are performed by said message 
endpoint for the service, and wherein said data representation language 
schema defines a message interface between said service and said client. 
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